confirm the test_repo_token

Author: whisper67265

.github/workflows/integration-functional.yml

@@ -15,6 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 25
     env:
+      # Use a repository *secret* (Settings → Secrets → Actions), not a variable.
       GH_TEST_REPO_TOKEN: ${{ secrets.GH_TEST_REPO_TOKEN }}
     steps:
     # actions/checkout v6.0.2
@@ -27,6 +28,22 @@ jobs:
       with:
         python-version: '3.12'
 
+    - name: Check GitHub test token availability
+      run: |
+        set -euo pipefail
+        if [ "${{ github.event_name }}" = "pull_request" ] && \
+           [ "${{ github.event.pull_request.head.repo.full_name }}" != "${{ github.repository }}" ]; then
+          echo "::notice::Fork PR: repository secrets (including GH_TEST_REPO_TOKEN)" \
+               "are not passed to workflows from forks."
+        fi
+        if [ -n "${GH_TEST_REPO_TOKEN:-}" ]; then
+          echo "GH_TEST_REPO_TOKEN is set (${#GH_TEST_REPO_TOKEN} characters)."
+        else
+          echo "::warning::GH_TEST_REPO_TOKEN is empty. E2E/Celery functional tests will be skipped."
+          echo "Add a classic PAT with the 'repo' scope as repository secret GH_TEST_REPO_TOKEN."
+          echo "Re-run the workflow after saving the secret (secrets are not applied retroactively to old runs)."
+        fi
+
     - name: Run integration functional tests
       run: bash scripts/integration-functional.sh
 

scripts/integration-functional.sh

@@ -42,6 +42,13 @@ export WEBLATE_COMPOSE_PROJECT="${COMPOSE_PROJECT_NAME}"
 echo "=== Extracting Weblate SSH public key ==="
 export WEBLATE_SSH_PUBKEY="$(compose exec -T weblate cat /app/data/ssh/id_rsa.pub)"
 
+if [[ -n "${GH_TEST_REPO_TOKEN:-}" ]]; then
+    export GH_TEST_REPO_TOKEN
+    echo "=== GH_TEST_REPO_TOKEN is set (${#GH_TEST_REPO_TOKEN} chars); GitHub E2E tests enabled ==="
+else
+    echo "=== GH_TEST_REPO_TOKEN is not set; GitHub E2E/Celery tests will be skipped ==="
+fi
+
 echo "=== Running functional tests ==="
 pip install --quiet pytest pytest-timeout
 python -m pytest --confcutdir=tests/integration --override-ini addopts= \

tests/integration/conftest.py

@@ -59,7 +59,11 @@ def test_repo(weblate_ssh_pubkey: str) -> EphemeralGitHubRepo:
     """Ephemeral GitHub repo with fixture docs and Weblate deploy key."""
     token = os.environ.get("GH_TEST_REPO_TOKEN", "").strip()
     if not token:
-        pytest.skip("GH_TEST_REPO_TOKEN is not set")
+        pytest.skip(
+            "GH_TEST_REPO_TOKEN is not set in the job environment "
+            "(repository Actions secret with classic PAT 'repo' scope; "
+            "not available on pull_request workflows from forks)"
+        )
 
     repo_name = default_repo_name()
     manager = EphemeralGitHubRepo(token, repo_name)